{"id":16322,"date":"2023-09-25T13:17:08","date_gmt":"2023-09-25T11:17:08","guid":{"rendered":"https:\/\/www.soft-gate.de\/?page_id=16322"},"modified":"2023-10-16T11:50:18","modified_gmt":"2023-10-16T09:50:18","slug":"16322-2","status":"publish","type":"page","link":"https:\/\/www.soft-gate.de\/en\/16322-2\/","title":{"rendered":"Cyber Security ENG"},"content":{"rendered":"
<\/div><\/div><\/div>

Cybersecurity<\/h1>\n<\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/section>
<\/div>
<\/div><\/div><\/div><\/div><\/div><\/div><\/section>

Given the increasing connectivity and digitization in healthcare, users and manufacturers are facing even more challenging tasks. Due to the increasing attack surfaces and growing system complexity, cybersecurity constitutes a crucial factor in the manufacturing and usage of medical devices.<\/p>\n

Our work is guided by the most crucial regulatory requirements, including the EU Regulation on Medical Devices (MDR), the U.S. FDA guidelines, and the ISO 27001 and 27799 standards. We are happy to advise you on various topics.<\/p>\n

We accompany your project through the following process steps with an experienced, dedicated, and competent team to success:<\/p>\n<\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/section>

\"\"<\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/section>
<\/div>

Security Processdiscribtion<\/strong><\/h3>\n<\/div><\/div>

Integrated safety from the initial idea to implementation<\/p>\n<\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/section>

Threat modelling<\/p>\n<\/div><\/div>

In this step, the specific security requirements of the application are determined by identifying potential threats. This allows for the integration of security measures from the beginning and to start the development on a solid foundation.<\/p>\n<\/div><\/div><\/div><\/div><\/div>

Secure Development<\/p>\n<\/div><\/div>

During the design process, security principles are incorporated into the application’s architecture. By considering principles such as \u201cLeast Privilege\u201d and \u201cDefense in Depth,\u201d potential vulnerabilities are reduced, and the application is made more resilient against attacks.<\/p>\n

Developers use secure coding practices such as input validation, exception handling, and avoiding unsafe memory access to minimize the likelihood of security gaps.<\/p>\n<\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/section>

Vulnerability management<\/p>\n<\/div><\/div>

In this phase, the focus is on robust vulnerability management. The application is continuously monitored to identify possible vulnerabilities or security risks. Through the use of regular scans, monitoring of security alerts, and quick remediation of vulnerabilities, we ensure the long-term security and integrity of the application.<\/p>\n

New insights from security research and evolving threat landscapes are incorporated into the update strategy to ensure that the application remains resilient against current and future threats<\/p>\n<\/div><\/div><\/div><\/div><\/div>

Secure testing<\/p>\n<\/div><\/div>

Security tests are an indispensable component of the software development process to ensure the integrity and confidentiality of applications.<\/p>\n

They encompass various approaches such as static analysis, dynamic analysis, and penetration testing. Static analysis identifies vulnerabilities in the source code, while dynamic analysis examines applications in their executed form for potential vulnerabilities. Penetration tests simulate real attacks to identify security gaps.<\/p>\n

Automated tools aid in scaling and enhancing the efficiency of these tests, but human expertise is equally important to uncover complex vulnerabilities. The continuous integration of security tests throughout the software lifecycle minimizes risks and ensures that applications remain resilient against an ever-evolving threat landscape.<\/p>\n<\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/section>

\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n
Slide 1-3 : IEC 62304, \u00a0ISO 14971 und FDA- Leitlinie der Marktf\u00fchrung<\/div>\n<\/div>\n<\/div>\n<\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/section>

Our Projects<\/em><\/strong><\/h2>\n<\/div><\/div>

Our extensive project experience with large and medium-sized medical device manufacturers distinguishes us notably. In these projects, we were able to ensure that cybersecurity was treated not just as a subsequent addition, but as an integral component of product development.<\/p>\n<\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/section>